Hi.

Using RC12a, trying to figure out a few things about SMB security settings:

 

1. If setting "Export" to "No", the "Security" setting doesn't effect nothing - is it possible to completely hide it from the interface (or have I misunderstood this one  ) ?

 

2. If setting any share to anything other then "Public", I'm getting asked for a user & password when trying to access my server ("\\tower"). I can't access the server without entering a vaild user defined on the "Users" tab. Is it by design or a bug ?

Looked at the Wiki - "Here is the part that causes confusion. If upon initial connection there is no unRaid user name that matches the Windows user name, or you enter a user name in the dialog box that does not exist on the unRaid server, access to the server is granted! In this case the server considers this to be a "guest" connection."

 

3. Setting "Security" to "Secure" allows everyone access the share, at least as read-only, while setting it to "Private" allows me to set a user to "no access" - doesn't it make the "Secure" setting redundant ? Is there any other difference between the two?

1. Is it still exporting when you have Export to No, or do you just mean you think the Security section in the user interface should be disabled or something?

2. By design.

3. Secure will allow read access for "guests", users that don't exist in unRAID. Private only allows the specified access granted to each specified unRAID user.

 

Maybe this post from limetech will help.

 

If you are still having trouble, try this on the windows machine:

net use * /delete

to clear the credentials.

"net use * /delete" removes persistent connections, it does not remove stored credentials. Credentials are removed via a control panel.

1. Is it still exporting when you have Export to No, or do you just mean you think the Security section in the user interface should be disabled or something?

2. By design.

3. Secure will allow read access for "guests", users that don't exist in unRAID. Private only allows the specified access granted to each specified unRAID user.

 

Maybe this post from limetech will help.

 

If you are still having trouble, try this on the windows machine:

net use * /delete

to clear the credentials.

1. I've meant that the Security section in the user interface should be hidden or disabled or greyed out when your choose not to export the share/disk.

2. Thanks. I've thought it should be more like a Windows Server, where you can see all the (visible) shares but can access only the ones you have permissions to.

3. I've thought that "Secure" is redundant 'because you can define "Private" to act the same, but then realized that you have to create a "guest" or "anonymous" user to grant a read-only permission. Maybe there should be a "unidentified" user built in to the system (like root) to simplify things. Then we can have only two security settings - "Public" for complete RW and "Secure" for permissions managment, where the "unidentified" user will be set to RO by default but can be changed to "No Access".

 

As for clearing up the permissions of the current connection:

1. net use * /delete

2. start -> run -> control userpasswords2, then at the Manage Passwords screen you should remove (forget) the current credentials.

3. net session * /delete to close the open session. this last one should be run as administrator.

 

just my 2 cents